$ rpki-client -vvf repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.mft File: FE5652AD4702104DB082C396B05EE5D04542E7D7.mft (raw, json) Hash identifier: ZAZmrZwsefs3F2DNbR4ExoWnbj1QrW9zHUpFl8EVre4= Subject key identifier: 07:F7:61:61:E0:BC:98:C3:A0:35:4E:B9:8C:8B:4E:0D:11:E1:DC:84 Authority key identifier: FE:56:52:AD:47:02:10:4D:B0:82:C3:96:B0:5E:E5:D0:45:42:E7:D7 Certificate issuer: /CN=FE5652AD4702104DB082C396B05EE5D04542E7D7 Certificate serial: 0D0D3AFE5869EB54E6E8F9323F80270BFC05D4BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE5652AD4702104DB082C396B05EE5D04542E7D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.mft Manifest number: 0123 Signing time: Sun 04 May 2025 08:01:51 +0000 Manifest this update: Sun 04 May 2025 07:56:51 +0000 Manifest next update: Wed 07 May 2025 19:29:51 +0000 Files and hashes: 1: 3130332e3233392e32302e302f32342d3234203d3e20313531353139.roa (hash: qQiMuOKfrH8PAPkv5BzDpLFaZ1Dhp8Gu3GpyZWN3n5w=) 2: 3130332e3233392e32302e302f32332d3234203d3e20313531353139.roa (hash: F9P1ZnUuqGV0taVDJEnFJzgAXTbawikhZBmBVym2mNw=) 3: FE5652AD4702104DB082C396B05EE5D04542E7D7.crl (hash: u4HIkzGmkdhlxmdd0Z9/Hrnmpaz/DxImuuVKJxB10as=) 4: 3130332e3233392e32312e302f32342d3234203d3e20313531353139.roa (hash: H3hffUKrAMQgM7P8EVWElY25bwWrRFq4QzBAmlTISAU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.crl rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE5652AD4702104DB082C396B05EE5D04542E7D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 19:29:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:0d:3a:fe:58:69:eb:54:e6:e8:f9:32:3f:80:27:0b:fc:05:d4:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE5652AD4702104DB082C396B05EE5D04542E7D7 Validity Not Before: May 4 07:56:51 2025 GMT Not After : May 7 19:29:51 2025 GMT Subject: CN=07F76161E0BC98C3A0354EB98C8B4E0D11E1DC84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:79:88:9e:d8:84:b9:c9:96:d2:1e:84:1e:9b: 7d:0e:81:35:08:ce:32:2d:0d:60:3d:f0:b5:f3:62: cf:17:d5:2b:ac:77:fa:9b:4f:33:49:fa:86:63:6f: 59:b3:31:df:99:e3:d1:a8:ae:74:e9:df:67:91:d7: c8:f2:3d:08:b5:ba:18:cf:9b:70:14:45:c4:b1:8b: 7c:aa:ae:77:bf:43:f3:37:10:53:4c:6f:82:2e:f4: 9c:48:e6:ce:f9:61:07:2d:e3:e9:57:1b:fb:ac:07: db:84:93:f3:ca:d6:56:02:b6:a0:fb:5c:24:42:17: 44:b7:3e:9e:54:1b:81:7f:c2:ac:4d:96:a1:1e:60: 22:53:ee:11:62:16:64:76:1f:a3:f2:0a:87:d9:0c: 95:fd:e7:f4:60:4a:e8:fe:a5:c0:a2:72:84:f9:a6: ee:98:84:31:1f:ed:d9:79:e8:b3:c6:b8:3f:34:ba: 71:5a:95:21:07:b0:08:e4:78:bf:14:85:1b:ac:28: 54:2d:75:17:0a:94:71:82:06:51:5c:62:9b:4a:66: aa:44:3f:02:11:79:cd:ef:e7:6b:5e:7b:47:6e:50: ef:06:61:09:97:a7:35:93:93:3c:fc:8b:58:fb:3e: f3:d2:aa:7f:22:ad:84:f6:38:95:6e:29:3a:e1:0a: 00:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F7:61:61:E0:BC:98:C3:A0:35:4E:B9:8C:8B:4E:0D:11:E1:DC:84 X509v3 Authority Key Identifier: keyid:FE:56:52:AD:47:02:10:4D:B0:82:C3:96:B0:5E:E5:D0:45:42:E7:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE5652AD4702104DB082C396B05EE5D04542E7D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:bd:01:52:2a:53:40:27:96:53:d6:0a:70:69:2c:c9:26:58: 0f:9a:08:ac:4b:67:3f:f0:cd:46:a9:4c:49:06:3f:a8:eb:95: d4:de:5f:44:ae:1b:5a:99:6c:6e:46:a7:45:d3:5f:e1:11:ec: 9f:30:b7:00:64:3a:6c:53:d2:16:be:52:98:42:61:a1:ec:f4: 03:3e:b6:5b:91:c0:29:93:a6:27:79:b1:46:a9:f3:93:79:c4: cf:5d:c2:29:35:e2:8b:c0:9f:82:17:d4:8a:dd:f9:3d:1f:eb: e6:6a:25:06:2b:0d:53:0b:60:5c:23:b8:77:69:13:9d:08:19: d1:c2:11:6e:5e:fd:8b:24:53:f7:c7:bb:27:3b:3d:47:e9:82: c3:a7:3e:59:5d:2b:ab:b1:f1:e7:74:8c:cd:37:e3:75:ec:9c: 1a:f1:28:86:4a:1f:2f:f8:88:af:77:8b:03:76:34:7f:61:0b: eb:a3:38:22:29:28:d2:67:a1:51:69:a6:0d:9f:2f:a5:79:1d: 47:ae:9f:ce:b0:6c:05:ba:69:21:48:b3:b2:18:ef:12:f7:dc: ac:11:a1:37:7b:64:af:f2:b0:bf:0c:bc:26:a6:ee:b2:e6:33: d6:7d:2a:26:cc:ab:3f:5f:d7:5e:3b:c5:71:a2:52:bb:5f:df: 02:ca:44:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDQ06/lhp61Tm6PkyP4AnC/wF1LowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU1NjUyQUQ0NzAyMTA0REIwODJDMzk2QjA1RUU1RDA0 NTQyRTdENzAeFw0yNTA1MDQwNzU2NTFaFw0yNTA1MDcxOTI5NTFaMDMxMTAvBgNV BAMTKDA3Rjc2MTYxRTBCQzk4QzNBMDM1NEVCOThDOEI0RTBEMTFFMURDODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFeYie2IS5yZbSHoQem30OgTUI zjItDWA98LXzYs8X1Susd/qbTzNJ+oZjb1mzMd+Z49GornTp32eR18jyPQi1uhjP m3AURcSxi3yqrne/Q/M3EFNMb4Iu9JxI5s75YQct4+lXG/usB9uEk/PK1lYCtqD7 XCRCF0S3Pp5UG4F/wqxNlqEeYCJT7hFiFmR2H6PyCofZDJX95/RgSuj+pcCicoT5 pu6YhDEf7dl56LPGuD80unFalSEHsAjkeL8UhRusKFQtdRcKlHGCBlFcYptKZqpE PwIRec3v52tee0duUO8GYQmXpzWTkzz8i1j7PvPSqn8irYT2OJVuKTrhCgDlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB/dhYeC8mMOgNU65jItODRHh3IQwHwYDVR0j BBgwFoAU/lZSrUcCEE2wgsOWsF7l0EVC59cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h N2FmZDU3YS1lNmRlLTRhNWYtYjVjNi0xMDg2NWQ1YThjOTgvMC9GRTU2NTJBRDQ3 MDIxMDREQjA4MkMzOTZCMDVFRTVEMDQ1NDJFN0Q3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkU1NjUyQUQ0NzAyMTA0REIwODJDMzk2QjA1RUU1RDA0NTQy RTdENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTdhZmQ1N2EtZTZkZS00YTVmLWI1 YzYtMTA4NjVkNWE4Yzk4LzAvRkU1NjUyQUQ0NzAyMTA0REIwODJDMzk2QjA1RUU1 RDA0NTQyRTdENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACO9AVIqU0AnllPWCnBpLMkmWA+aCKxLZz/w zUapTEkGP6jrldTeX0SuG1qZbG5Gp0XTX+ER7J8wtwBkOmxT0ha+UphCYaHs9AM+ tluRwCmTpid5sUap85N5xM9dwik14ovAn4IX1Ird+T0f6+ZqJQYrDVMLYFwjuHdp E50IGdHCEW5e/YskU/fHuyc7PUfpgsOnPlldK6ux8ed0jM0343XsnBrxKIZKHy/4 iK93iwN2NH9hC+ujOCIpKNJnoVFppg2fL6V5HUeun86wbAW6aSFIs7IY7xL33KwR oTd7ZK/ysL8MvCam7rLmM9Z9KibMqz9f1147xXGiUrtf3wLKRJw= -----END CERTIFICATE-----Generated at Tue May 6 14:27:41 2025 by rpki-client